2.10.2/0.8.1 pin back astral-tokio-rs

[jhheider]

some of our tarballs don't pass its checks

[Copilot]

Pull request overview

Pins astral-tokio-tar back to a version that accepts certain macOS-generated tarballs, while bumping the libpkgx and pkgx crate versions to reflect the change.

Changes:

• Bump libpkgx version from 0.8.0 → 0.8.1.
• Bump pkgx version from 2.10.1 → 2.10.2 and update its libpkgx dependency accordingly.
• Pin astral-tokio-tar from 0.6.0 → 0.5.6 (and update Cargo.lock).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
crates/lib/Cargo.toml	Bumps libpkgx version and pins astral-tokio-tar to avoid tarball validation failures.
crates/cli/Cargo.toml	Bumps pkgx version and aligns libpkgx dependency version.
Cargo.lock	Updates lockfile to reflect the crate version bumps and tar dependency downgrade.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coveralls]

coverage: 90.234%. remained the same
when pulling cfa1105 on fix-tar
into fcb5ffd on main.